Vulnerability · Published Jul 15, 2026 · Assigned by VulnCheck

CVE-2026-56353n8n - Authentication Bypass in Chat Trigger Node

Medium 4.8

In plain English

A medium-severity improper authentication in n8n from n8n. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 26% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)4.8Medium

Exploit odds (30 days)0.3%top 73.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

n8n contains an authentication bypass in the Chat Trigger node when configured with n8n User Auth (a non-default configuration). In affected releases — before 1.123.22, the 2.0.0 through 2.9.2 line, and 2.10.0 — the authentication check on the Chat Trigger webhook endpoint can be circumvented, allowing access without valid credentials. Fixed in 1.123.22, 2.9.3, and 2.10.1.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
npm	n8n	1.123.22	GHSA-jh8h-6c9q-7gmw
npm	n8n	2.9.3	GHSA-jh8h-6c9q-7gmw
npm	n8n	2.10.1	GHSA-jh8h-6c9q-7gmw

Affected products (as reported)

Vendor	Product	Versions
n8n	n8n	0 – before 1.123.222.0.0 – before 2.9.32.10.0 – before 2.10.1

Weakness: CWE-287 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

References

GitHub Security Advisory (GHSA-jh8h-6c9q-7gmw) vendor-advisory
VulnCheck Advisory: n8n - Authentication Bypass in Chat Trigger Node third-party-advisory